- Fix unbound.conf man page entry for root-hints to say it can

  be used without strongly recommending it.

diff --git a/doc/Changelog b/doc/Changelog
index 75559ccd2b43faff6ff779cb0d1084ab14e3ad89..88f121bc9227bdd5fb9c6045ae65771f52f02f17 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -4,6 +4,8 @@
        - Add extended dns error code for invalid query type to definition
          list.
        - Fix to update openssl version in ios ci.
+       - Fix unbound.conf man page entry for root-hints to say it can
+         be used without strongly recommending it.
 
 10 October 2025: Wouter
        - Fix #1358 Enabling FIPS in OpenSSL causes unit test to fail.

diff --git a/doc/unbound.conf.rst b/doc/unbound.conf.rst
index 4c85f5a04a115768f952be85ec9538f04277a414..00dadbc9b1ff52511c5188bcaee879d7b60ff020 100644 (file)
--- a/doc/unbound.conf.rst
+++ b/doc/unbound.conf.rst
@@ -1680,8 +1680,8 @@ These options are part of the **server:** clause.
     Default is nothing, using builtin hints for the IN class.
     The file has the format of zone files, with root nameserver names and
     addresses only.
-    The default may become outdated, when servers change, therefore it is good
-    practice to use a root hints file.
+    The default may become outdated, when servers change, and then it is
+    possible to use a root hints file with specific servers.
 
     Default: ""